Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224871 10 危険 Apache Software Foundation - Apache Open For Business Project における任意の Unified Expression Language 機能を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2250 2013-08-16 11:45 2013-07-20 Show GitHub Exploit DB Packet Storm
224872 4.3 警告 Apache Software Foundation - Apache Open For Business Project の Webtools アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2137 2013-08-16 11:37 2013-07-20 Show GitHub Exploit DB Packet Storm
224873 7.5 危険 BigTree CMS - BigTree CMS の core/inc/bigtree/cms.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4879 2013-08-15 19:02 2013-07-3 Show GitHub Exploit DB Packet Storm
224874 4.3 警告 BigTree CMS - BigTree CMS の core/admin/modules/developer/modules/views/add.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4880 2013-08-15 19:00 2013-07-17 Show GitHub Exploit DB Packet Storm
224875 7.5 危険 Moxi9 - PHPFox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5121 2013-08-15 18:39 2013-08-7 Show GitHub Exploit DB Packet Storm
224876 7.5 危険 Moxi9 - PHPFox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5120 2013-08-15 18:33 2013-07-30 Show GitHub Exploit DB Packet Storm
224877 7.5 危険 LibRaw - LibRaw の exposure correction コードにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2127 2013-08-15 18:04 2013-05-24 Show GitHub Exploit DB Packet Storm
224878 7.5 危険 Novell
Canonical
LibRaw		 - LibRaw の libraw_cxx.cpp 内の LibRaw::unpack 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2126 2013-08-15 18:01 2013-05-26 Show GitHub Exploit DB Packet Storm
224879 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3199 2013-08-15 15:54 2013-08-13 Show GitHub Exploit DB Packet Storm
224880 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3194 2013-08-15 15:51 2013-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279091 7.5 HIGH
Network 		netty
playframework
lightbend 		netty
play_framework 		Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly f… CWE-20
 Improper Input Validation  		CVE-2015-2156 2024-11-21 11:26 2017-10-19 Show GitHub Exploit DB Packet Storm
279092 4.8 MEDIUM
Network 		phpbugtracker_project phpbugtracker Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting 		CVE-2015-2148 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279093 9.8 CRITICAL
Network 		phpbugtracker_project phpbugtracker Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. CWE-89
SQL Injection 		CVE-2015-2147 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279094 9.8 CRITICAL
Network 		phpbugtracker_project phpbugtracker Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id pa… CWE-89
SQL Injection 		CVE-2015-2146 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279095 4.8 MEDIUM
Network 		phpbugtracker_project phpbugtracker Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting 		CVE-2015-2145 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279096 4.8 MEDIUM
Network 		phpbugtracker_project phpbugtracker Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name paramet… CWE-79
Cross-site Scripting 		CVE-2015-2144 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279097 8.8 HIGH
Network 		phpbugtracker_project phpbugtracker Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecifi… CWE-352
 Origin Validation Error 		CVE-2015-2143 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279098 8.0 HIGH
Network 		phpbugtracker_project phpbugtracker Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that caus… CWE-352
 Origin Validation Error 		CVE-2015-2142 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279099 5.9 MEDIUM
Network 		http.rb_project http.rb The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack. CWE-200
Information Exposure 		CVE-2015-1828 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm
279100 7.8 HIGH
Local 		pngcrush_project pngcrush Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary c… CWE-189
Numeric Errors 		CVE-2015-2158 2024-11-21 11:26 2017-10-7 Show GitHub Exploit DB Packet Storm